Security Scan Report: thepetworld.org

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking pet site whose scripts have been compromised with an EtherHiding blockchain malware loader; obfuscated code hides known-attacker and Vidar-malware hosts, with CRITICAL IDS malware alerts. Avoid.

Risk Factors (4)
EtherHiding blockchain-based malware loader present in page scripts
Obfuscated JavaScript hides a known-attacker host and a Vidar-malware-associated host
CRITICAL IDS malware alerts (EtherHiding Exfil) and HIGH Spamhaus DROP listing
Live cross-origin requests to a blockchain RPC endpoint used for payload retrieval
Domain age information unavailable

Details

Page Title

Dog Breeds A-Z | Discover All Dog Breeds at ThePetWorld

Scan Type

public

Domain Name Analysis

The domain 'thepetworld.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. The registrable portion 'thepetworld' spans 11 characters containing 3 vowels alongside 8 consonants. Breaking it apart gives 3 words: the, pet, world. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thepetworld.org/dog-breeds

Page Load Overview

7.51s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,591 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical28% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
28%
news/blog
20%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22162.0.215.36United States
AS22612Namecheap, Inc.
17192.178.183.95Google 路 CDNUnited States
AS15169Google LLC
17192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
17192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
17172.66.150.162Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
1716.15.252.207Aws 路 CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
17192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
17104.20.24.117Cloudflare 路 WAFUnited States
AS13335Cloudflare, Inc.
17158.94.210.145Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
1716.15.254.179Aws 路 CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
27716--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10635D7A73E92283532BB87EA501676CCF0A29DF5E4D0C7D5F579E594F2A0C62B2C1270

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:pxBkwJ97tj5oDBmExBkwJ97tj5oDBExBkwJ97tj5oDBj:pPkA9LodmEPkA9LodEPkA9Lodj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1138351:BYXRCEoIAKGKJbEpWpDhg1DZJJyiQZABNQmIABC5CMgHsaiBwaKgAQQmIinGpEANAAEkYwhUlgMKpxFQAIBAFBtjU7Qk0gel

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data